General
- Target 982964da6635c5f730d427fee80c3e5a.exe
- Size 3.8MB
- Sample210308-s44jtngjdn
- SHA256 dcf25c53393531d6afc2680fcedbb77d4826e4d109fbb001d3aaaed01798b867
- MD5 982964da6635c5f730d427fee80c3e5a
- SHA1 30899b5f2ae660185885527a4050fa976ea54abd
- SHA512 a6b3fe997eba49472d3b45bc4caae28570a1c8a9caa37be03f8b38e87100ec2e7ac625519147208d37affbcc1806e62da584f2b6a5a85297af6044bb35a93da1
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
982964da6635c5f730d427fee80c3e5a.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
982964da6635c5f730d427fee80c3e5a.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.yandex.com
-
Port
587
-
Username
-
Password
browse9ja
Targets
-
- Target 982964da6635c5f730d427fee80c3e5a.exe
- Size 3.8MB
- SHA256 dcf25c53393531d6afc2680fcedbb77d4826e4d109fbb001d3aaaed01798b867
- MD5 982964da6635c5f730d427fee80c3e5a
- SHA1 30899b5f2ae660185885527a4050fa976ea54abd
- SHA512 a6b3fe997eba49472d3b45bc4caae28570a1c8a9caa37be03f8b38e87100ec2e7ac625519147208d37affbcc1806e62da584f2b6a5a85297af6044bb35a93da1
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext